Someone tipped me to some security best-practices documentation in the
public Leopard Server Getting Started document. (Right...Reading. It's
so last century, right? <wink> )

http://www.apple.com/server/documentation/

Pages 43-44

Example:

"For security, you should create a standard user account after
completing server setup. When you log in on the server, routinely use
this standard account instead of an administrator account. Then use your
administrator account with each application that requires administrator
privileges. For example, use your administrator name and password with
Server Preferences when you need to manage users, groups, or services."

Not quite the Setup Assistant solution I hoped for, but it's a good Best
Practices start. As soon as I remember how to read, so I'll post more
info as I find it.

There are also some Leopard manuals not yet available such as the:

* Command Line Administration
* Mac OS X Security Configuration
* Mac OS X Server Security Configuration

(The security guides currently published are for Tiger.)

This is not entirely unusual as some documentation were post-release for
Panther and Tiger Server as well.

Security Response Researcher
Focus-Apple Moderator

Todd D. Woodward
Technical Support Engineer
NetBackup Support
Symantec Corporation
www.symantec.com
Springfield, Oregon

Office: 541-335-7441

[ reply ]